Privacy, the boring kind.

01 Who we are

Wavio is a free, open-source Android application maintained by independent contributors. The source code is published under the MIT license and available for anyone to inspect on GitHub.

02 What Wavio collects about you

Nothing personal. Wavio has no accounts, no profiles, no advertising SDKs, no behavioural analytics, and no social trackers. We do not operate any server that stores who you are or what you listen to.

The only data leaving your phone is what's needed to play music or to help us diagnose crashes, described in the next two sections.

03 What stays on your device

To work as a music player, Wavio stores the following locally, on your phone only:

• Server connection details (URL, username, and an encrypted password or token) for each server you add.
• Your playback queue, recently played and recently searched items, sleep timer and equalizer settings, and other app preferences.
• Tracks you choose to download for offline listening, plus cached album art and metadata fetched from your server.
• Podcast API credentials (Taddy) if you enable podcasts.

This information lives in app-private storage. Uninstalling Wavio removes all of it.

04 What your music server sees

When you connect Wavio to a Navidrome, Jellyfin, or OpenSubsonic instance, the app communicates directly with that server using the credentials you provide. The server will typically log your IP address, the requests you make, and your listening activity, just like any other client would.

Wavio's contributors do not operate those servers and have no access to what they log.

Please consult the privacy policy of the server you connect to.

05 Crash and error reporting

Production builds of Wavio use Sentry to report crashes and unexpected errors so we can fix them. Each report includes technical context such as a stack trace, the app version, the device model, the Android version, and the IP address that delivered the report.

We do not assign you an identifier, do not track which screens you visit, do not log what you listen to, and do not build a profile of you. Reports are used only to diagnose bugs and are retained according to Sentry's data retention policy.

06 Android permissions

Wavio requests only the permissions it needs to play music:

• Internet to reach your music server and the third-party services listed below.
• Foreground service and media playback to keep audio playing when the screen is off.
• Notifications to display playback controls on the lock screen and in the notification shade.
• Modify audio settings to apply the system equalizer.
• Read media audio and storage to save and read downloaded tracks for offline playback.
• Vibration for subtle haptic feedback on certain controls.

Wavio does not request access to your contacts, your precise location, the camera, or any other sensitive data.

07 Third-party services

Beyond your music server and Sentry, Wavio talks to a small number of external services, and only when the corresponding feature is used:

• LRCLib is queried for synchronised lyrics when you open the lyrics view for a track.
• Taddy powers podcast search and metadata, and is only contacted if you provide your own Taddy API key and user ID in the settings.
• Radio Browser provides the internet radio station directory, and is queried when you browse or search for radio stations.
• Google Cast is used when you cast playback to a Chromecast-compatible device. Google's terms then apply to that session.

No advertising network, no analytics provider, and no social tracker is integrated into Wavio.

08 Children

Wavio is suitable for users of all ages and does not knowingly collect any information about anyone, including children.

09 Changes to this policy

If this policy ever changes, the updated version will be published here and announced in the project's release notes on GitHub.

10 Contact

Questions, concerns, or curiosity? Open an issue on the Wavio GitHub repository and a maintainer will get back to you.